This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
File: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft (raw, json)
Hash identifier: OK5Qu9c+CUXcHvgqcWML8R+UiGp11wUpua9Ddz6P71s=
Subject key identifier: 6F:93:87:2C:63:8A:CE:2D:1E:5E:65:0A:C2:5D:58:44:12:56:DB:AF
Authority key identifier: CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52
Certificate issuer: /CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
Certificate serial: 29A307EB46A16624076F4B6C370B458523130A1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
Manifest number: 0139
Signing time: Sun 25 Jan 2026 14:05:05 +0000
Manifest this update: Sun 25 Jan 2026 14:00:05 +0000
Manifest next update: Mon 26 Jan 2026 15:02:05 +0000
Files and hashes: 1: 323830343a326565633a3a2f33322d3438203d3e20323634383631.roa (hash: Pmd2oHMVN3RO65spy8KBeP91n4F+2uJwEIYTdWohKkU=)
2: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: sszuikLyJCfK/q7HZ7Bf5gDMhQQ8QEhvjEDczDvmx9s=)
3: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl (hash: f1ZZfuAG/izBIlidmVadMMLifVLTddqhHZGpQN/DHwo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl
rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 15:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a3:07:eb:46:a1:66:24:07:6f:4b:6c:37:0b:45:85:23:13:0a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
Validity
Not Before: Jan 25 14:00:05 2026 GMT
Not After : Jan 26 15:02:05 2026 GMT
Subject: CN=6F93872C638ACE2D1E5E650AC25D58441256DBAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:c5:76:ac:8c:cb:b9:ce:0d:fc:e4:7b:8e:
20:a3:89:5c:33:da:29:b4:4a:25:17:8d:c9:9d:3e:
23:1a:f9:72:89:59:ac:4a:2b:18:7d:c3:5d:93:5e:
7a:dd:49:14:94:c8:b4:c9:d7:6d:a9:58:9f:4f:31:
0d:b9:5a:93:63:07:95:67:8c:06:3d:55:2a:23:7c:
13:90:ec:cd:63:8b:f9:9d:ff:cd:9c:47:93:ec:63:
4f:aa:bd:66:ad:f7:3d:af:d8:4e:ca:83:05:8c:4a:
3b:79:d9:d6:dc:c9:b4:89:0c:29:a4:2d:60:29:9f:
3e:2f:68:c3:5f:b9:a2:b7:05:67:ec:10:c1:52:c5:
89:48:2d:dd:30:43:87:c2:42:67:b1:85:fc:d6:ad:
9e:07:b1:01:73:73:04:65:c3:93:af:0a:59:81:6a:
d3:17:bc:a1:b7:0e:1a:55:ef:9c:88:8e:68:aa:ad:
c5:a9:92:fa:0b:43:20:ca:e0:2f:20:38:40:03:9a:
30:8a:6c:a6:75:31:25:56:08:1c:68:df:2c:06:63:
2e:c3:ca:cd:3a:0b:c8:50:cf:1d:d6:20:f2:de:69:
22:fd:fd:22:df:f2:d3:5d:b7:8d:05:08:65:1e:d5:
e0:18:e4:81:02:af:24:3e:6b:c1:5e:ca:82:b5:d7:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:93:87:2C:63:8A:CE:2D:1E:5E:65:0A:C2:5D:58:44:12:56:DB:AF
X509v3 Authority Key Identifier:
keyid:CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a9:6b:5d:f3:17:bf:a5:af:d4:54:66:3c:84:3b:d1:a3:6c:
cb:72:9f:9d:ac:82:87:27:77:63:f8:53:0e:cc:92:ec:54:e4:
1d:15:f2:c4:5d:61:3f:3d:65:9f:c6:52:d6:41:d9:c6:c7:41:
14:34:6d:b2:4c:bd:32:47:49:3f:9b:93:c5:d0:b5:5c:e6:e2:
49:f2:8f:f5:1b:9d:84:e6:2e:a6:e0:8f:1b:53:4c:c9:e3:dd:
69:65:ea:44:ff:6c:47:3d:60:82:e1:d8:0d:31:d3:90:b7:c4:
27:97:6f:ff:01:42:b7:b8:fb:96:43:9f:45:e3:5c:aa:78:eb:
56:f8:59:c0:0b:35:2b:89:ee:8f:47:6c:d4:b5:85:a1:9f:5f:
ee:f5:0b:96:44:4a:42:0a:fc:ad:35:e2:30:1d:c8:4f:9c:2f:
da:db:b4:1c:39:67:ba:d5:9f:99:63:18:b3:2b:cb:c6:31:1e:
9f:dd:69:09:24:6e:6a:c1:2a:26:8f:33:c8:9e:f5:2e:d8:ff:
7f:ad:4a:79:5e:c9:ed:22:da:7a:d9:15:a8:a4:65:07:be:cb:
49:bd:d9:8e:78:1a:ce:71:93:15:4a:77:2d:5e:ef:3d:df:b3:
28:16:de:ed:ca:bc:d4:a7:6b:ed:f6:7c:64:71:7c:7a:2b:78:
65:50:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:34 2026 by rpki-client